CVE-2025-70792
1 advisory.
Packagist/microweber/microweber CVE-2025-70792: medium 6.1, EPSS 0.32%
Microweber Cross-site Scripting vulnerability
Action: Upgrade microweber/microweber to 2.0.20 or later.
composer require microweber/microweber:2.0.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.20 | - |
Fixed versions
| 2.0.20 |
Sources
- osv: GHSA-6w5w-jx4x-vjvw
- https://nvd.nist.gov/vuln/detail/CVE-2025-70792
- https://github.com/microweber/microweber/commit/aa0791fc286d785ccd33ccc706f7bb3ed05b1d7f
- https://gist.github.com/TimRecktenwald/f4b0d1edbb87e75c17c639ca0bacba57
- https://github.com/microweber/microweber
CVE-2025-70792 · published · modified · JSON